Forum Discussion

Eric_Corbasson's avatar
Eric_Corbasson
Copper Contributor
Aug 10, 2023

IPSEC IKEv2 VPN Client Digital Signature configuration

Hi,   How can we configure Windows 11 Pro to avoid '4096-bit PKCS#1 1.5 RSA with SHA1' Digital Signature authentication for an 'IPSEC IKEv2 Certificate' VPN client on a Windows 11 (22H2) Profession...
configuration
security
Hugh_Sparks's avatar
Hugh_Sparks
Copper Contributor
Jun 04, 2024

Eric_Corbasson 

I'm having the same difficulty now (2024)

Were you ever able to configure a Window client to use a more secure/acceptable signature algorithm?

Thanks!

 

  • Eric_Corbasson's avatar
    Eric_Corbasson
    Copper Contributor
    Jun 06, 2024

    Alas not yet, VPN connection is still refused by server since '4096-bit PKCS#1 1.5 RSA with SHA1' signature is no longer supported (RFRC 8247). I did not find any VPN connection parameter in Powershell to specify a signature algorithm to use.

    Windows definition is :
    Edition: Windows 11 Professional
    Version : 23H2
    Build: 22631.3593,
    Experience: Windows Feature Experience Pack 1000.22700.1003.0

    You are right, if I find any solution, I will let you know.

    Best regards
    Eric

Resources